
Figures 25A, 25B, 25C, 25D, and 25E are class specification of 
CProtocolRestrictionCheck class where the steps in the oneFormatRestriction function shows 
the process to modify the map structure; and 

Please delete paragraph [pi 07] and substitute therefore: 

Figure 1 7 shows the map data structure (using (key, value) pairs) used for creating and 
caching the protocol processor, hi one embodiment, for a given formatted event data, 
multiple protocols may need to send the same event data. Likewise, the same protocol may 
be requested to send the same data using different data formats. As discussed above, the key 
of each pair specifies a protocol (e.g., SMTP, FTP or HTTP) to be used. The value of the 
map is itself a second pair (x,y), where x is a pointer to the protocol processor object, and 
where y is a pointer to the function that creates the protocol processor. This map is initialized 
to contain the keys and values with the x value being assigned a flag value (e.g., zero). When 
a particular protocol is requested, the x value corresponding to the specified key is checked. 
If the x value is zero, the function pointed to by y value is executed. That execution creates 
the protocol processor, and the pointer to the created object is stored in the x value. Then, the 
newly created or subsequently stored pointer to the object is then returned as a pointer to the 
abstract class. Step 6 of Figure 16B (corresponding to step 8 of Figure 14) illustrates an 
exemplary code fragment that calls the createProtocolProcessor function. The 
createProtocolProcessor function returns a pointer to the abstract protocol processor object 
(identified by the return type "CAbsProtocolProcessor *"), Step 7 of Figure 16B 
(corresponding to the step 9 of Figure 14) shows sending monitored information in a 
requested format. 



Please delete paragraph [pi 08] and substitute therefore: 



Figures 18 A, 18B, and 18C show the function list and the attributes of the 
CProcessorBuilder Class according to one embodiment of the present invention. The public 
function createDataFormatProcessor receives the specification for the Data Formatter and 
retums the pointer to the specified Data Formatter object in the abstract class type. The 
public function createProtocolProcessor function receives the specification for the Protocol 
Processor and retums the pointer to the specified Protocol Processor in the abstract class type. 
The m_pDataFormatter attribute of the class is used to cache the specified data formatter in 
the class. The other two map attributes show the structure shown in the Figures 15 and 17. 
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e function definition section shows the steps used by the various functions declared in the 
function hst. 

Please delete paragraph [pi 10] and substitute therefore: 



Figure 20^h~ows relationships of the CFormatProtocolCombinationCheck class 610 
and the CProtocolRestrictionCheck class 620 used within the Format And Protocol 
hiformation Base System. Generally, the CFormatProtocol_LiformationBase interface 600 
(described in more detail with reference to Figures 23A, 23B, 23C, and 23D) keeps track of 
the specified formats and protocols. That interface 600 uses the (1) 

CFormatProtocolCombinationCheck class 610 and (2) the CProtocolRestrictionCheck class 
620 for (1) verifying requested combinations and (2) checking for restrictions on the 
protocols, respectively. 

Please delete paragraph [pill] and substitute therefore: 

Figure 1 1 descnbes the process by which the system manager 560 verifies whether a 
specified format and protocol combination is valid. A storeFormatAndProtocol request from 
the system manager 560 is initially handled by the CFormatProtocol_InformationBase 
interface 600. Using the relationships illustrated in Figure 20, that interface 600 converts the 
request to an isFormatProtocolCombinationOK request that is sent on to the 
CFormatProtocolCombinationCheck class 610. If that class 610 retums "true," then the 
combination is valid; otherwise, the class 610 retums false indicating that the combination is 
invalid. When the combination is valid, the two values are stored into two different maps 
specified in the Figures 23A and 23B. - 

Please delete paragraph [pi 13] and substitute therefore: 

Figures 23 A and 23B are an exemplary class definition of 
CFormatProtocol_hiformationBase interface/class. The functions, storeFormatAndProtocol 
and getFormatAndProtocol Vector, are public functions used by the System Manager 560 
computer code device (an object of CMonitorManager class). Two map structures keep the 
specified formats and protocols passed through the function, storeFormatAndProtocol, after 
checking the validity of the combination of the format and the protocol through the object, 
m_FormatProtocolCombinationCheck of CFormatProtocolCombinationCheck class. The 
class also contains the object, m ProtocolRestrictionCheck of CProtocolRestrictionCheck 
class. The flag, m_bFirstGetCall is used to call the function in the 

m ProtocolRestrictionCheck when the function getFormatAndProtocolVector is called for 
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